Câu 31: CCFA-200B: CrowdStrike Certified Falcon Administrator

What happens when a Falcon Sensor on a Linux host enters Reduced Functionality Mode (RFM)?

1. A. RFM sensors on Linux hosts stop processing both events and detections. Sensors send basic status information to the Falcon Console. — đáp án hiện tại
2. B. RFM sensors on Linux hosts stop processing events and detections but continue to send log data into Falcon.
3. C. RFM sensors on Linux hosts continue to process events and detections for existing policies but cannot get policy updates from the Falcon Console.
4. D. RFM sensors on Linux hosts only send detection information to the Falcon Console. Event processing is disabled.